Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
File:                     8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft (raw, json)
Hash identifier:          19jab2qNoaXDndux2pZm0kaK3CduGhONPH70vBZn36E=
Subject key identifier:   32:35:E2:96:01:CC:44:43:72:AF:09:A3:F7:E6:C2:D8:36:4F:26:15
Authority key identifier: F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5
Certificate issuer:       /CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
Certificate serial:       019769616F17CA6608CC9C4B0B4B3BA96D9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
Manifest number:          73
Signing time:             Fri 13 Jun 2025 13:01:22 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:22 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:22 +0000
Files and hashes:         1: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl (hash: 4Na4kG07J3Lb9nb5J1ZM8MBpOEkvHwFjW0bVDR4Fhow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:6f:17:ca:66:08:cc:9c:4b:0b:4b:3b:a9:6d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
        Validity
            Not Before: Jun 13 13:01:22 2025 GMT
            Not After : Jun 14 13:01:22 2025 GMT
        Subject: CN=3235e29601cc444372af09a3f7e6c2d8364f2615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:0f:dd:98:14:b0:f2:76:4b:b9:e8:72:b8:
                    84:d0:61:30:0e:8b:9e:43:4f:c5:e0:69:b2:6e:bc:
                    a6:d2:54:72:06:68:e1:8b:82:70:95:ee:ce:df:a1:
                    11:92:1c:7c:c6:f8:ba:db:b3:e4:91:1a:ef:77:82:
                    9b:40:56:44:c5:a4:4d:6e:b3:f4:fe:40:22:b2:91:
                    21:20:4a:92:59:39:8e:75:f1:04:63:9e:40:a9:1e:
                    c2:27:7d:92:27:62:0a:f1:0b:d7:05:b5:30:5c:00:
                    50:d7:87:1b:c2:5b:3f:66:db:49:35:ab:1a:75:7d:
                    f6:6d:cc:ae:29:a8:04:26:d9:9b:b7:68:2a:68:99:
                    0f:db:de:e8:89:62:3e:20:8f:bb:81:41:b5:57:62:
                    14:8e:83:fa:80:7d:07:4a:05:35:d3:c8:80:db:b3:
                    a8:24:bb:25:a9:a5:65:77:ab:bf:02:82:96:2f:29:
                    77:94:ff:51:a4:88:4a:ee:e1:f1:3a:4a:7d:cc:c1:
                    72:91:3b:60:05:0a:6f:d0:fc:6c:c0:96:db:8c:a9:
                    eb:02:77:c2:9e:50:fa:96:0f:21:35:33:32:b5:0e:
                    94:05:49:a1:6d:00:5d:e7:43:ea:4e:51:b6:97:6b:
                    cf:29:0f:b2:6e:6c:50:bb:9d:47:4d:c8:c3:bd:0f:
                    bd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:35:E2:96:01:CC:44:43:72:AF:09:A3:F7:E6:C2:D8:36:4F:26:15
            X509v3 Authority Key Identifier:
                keyid:F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fb:1d:3f:56:d8:4b:61:8e:46:5c:d1:6a:1b:c0:2f:8b:e3:
         90:27:5b:fb:35:c4:7b:02:e4:85:fc:44:40:8a:e5:82:83:bc:
         9e:a4:de:ca:9b:b9:46:26:fc:dd:0e:35:6a:25:bf:a1:50:95:
         54:10:aa:49:c8:9f:33:25:3f:bb:88:78:e4:42:1e:fb:ff:4a:
         ac:60:79:e3:c8:27:58:38:ed:56:2a:46:b1:64:82:d3:a0:30:
         cd:7a:c2:d7:b8:60:d4:0d:67:7f:b4:af:58:49:8c:7f:06:27:
         4c:00:83:b9:07:87:94:fe:47:2e:d7:b7:4c:35:2d:10:ee:2f:
         76:b6:16:fa:c4:f1:49:10:0b:e9:6f:86:19:ce:41:34:6c:52:
         ae:0a:a7:45:bf:b2:c1:a4:1a:05:ce:95:9c:4d:66:17:df:7a:
         90:7a:bf:ad:2e:9e:79:19:6c:6b:34:2d:7f:60:45:3b:89:9d:
         fb:8a:ac:fd:66:77:84:c3:a3:b3:54:51:26:5e:e4:24:50:3f:
         45:21:0e:39:aa:ff:1e:a3:1d:cd:b3:e8:71:3e:3e:7e:36:5a:
         9c:9a:86:da:e3:ba:03:c9:bd:15:d1:67:e9:a8:5a:f1:67:a1:
         bc:97:7e:f7:28:ac:9f:d4:8c:b7:ad:88:9a:c9:f5:b2:5a:dd:
         20:ff:70:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:54:27 2025 by rpki-client